Hostname Ban

[Matthew]

-
Hostname Ban v1.2
For Linux & Windows Dedicated Servers



» Download Here! « (http://www.unrealadmin.org/forums/attachment.php?attachmentid=1116&d=1153676630)



-------------------------
Hostname Ban
Created By MSuLL
-------------------------

Hostname Ban is a banning system that allows admins to ban players by their, you guessed it, hostname. Using this method, an admin can effectively block many lamers from their servers by banning by hostname ranges.
(for example: *.mytown.newyork.theplanet.net)

Many hosts use this sort of naming system, where a region or city is given a prefix - a perfect way to ban a range.

Use wisely though! If you are not careful you can end up banning a lot of legitimate players from your server.

The skeptics / lamers / cheaters / etc will say that this will cause lag, generate too much traffic resolving the DNS, and other such crap. This system was tested with 100% sucess on a server with 30 players connected simultaneously.


That's about it, if you have any questions, you know who to complain to.


Enjoy everyone!
- MSuLL





Changelog:
===========
----------------
| Version 1.20 |
----------------
(First Official Release)
- [Added] WebAdmin interface
- [Added] Extra protection against invalid entries
- [Added] 'check' command

----------------
| Version 1.10 |
----------------
(First Public Beta)
- [Added] 'mutate' commands

----------------
| Version 1.0 |
----------------
(First Private Beta)






+-------------+
| Thanks To |
+-------------+
- PurplePants: For OPBan, which I used a lot as a
reference while making the WebAdmin interface.

- [es]Rush: For creating IpToCountry, the backbone
of this mod.

- {SDA}Baiter: For beta testing and feedback.

- lism: He was the one who first proposed this idea.

- |KOA|The_Dave: For servers to test on, a website,
and a lot of support for all this time!

- Azazel: For the hosting of UnrealAdmin.org,
which is my little base of operations.


----------------
| MSuLL - 2006 |
----------------

[Baiter]

Awesome Job Matthew!

[Al]

Good stuff Matt! Keep up the great work!

[Missie]

Good Job Matthew !!! Will put it on at once.

I assume the new check command can be used with multi-servers. Ban on server 1 and mutate hb check on server 2... ?

[Matthew]

Um Missie I've said it many times, this thing cannot do multi-servers. If you attempt to use the HostnameBan.ini external file for all of your servers, you will just end up royally screwing it up.

You've been warned three times... I can't be held responsible if you kill your servers.

[Missie]

Hmmm, oke m8. I was thinking maybe you added the check command for this. My wrong, sorry. Will remove the hostnameban then. bummer.

Still a top job though, keep up the great work !!

Greetz

[Matthew]

Why remove it?

Do you really ban that many people that it is an issue to copy the banlist to 2-3 servers?

I manage 5 and have never had any issue. Just get into webadmin, do a mass edit of the policy, then copy - paste everything over.

Easy.

[Matthew]

Selling like hotcakes :)

35 total from my website and this one put together.

[[BSC]MasterJohnny]

Found some issue:

I banned 2 hosts:
*.dsl.pol.co.uk
*.sand.blueyonder.co.uk

and then:

ScriptLog: [Hostname Ban] New Player: xxx - *.*.*.* - user-****.lns4-c12.dsl.pol.co.uk
ScriptLog: [Hostname Ban] xxx - Login DENIED - (Policy Match: *.sand.blueyonder.co.uk)

[Matthew]

|o| seems my policy match reporting is a little off-kelter :P

thanks

[Baiter]

Critical: appError called:
Critical: LinkActor CTF-Amon.LinkActor0 (Function UBrowser.UBrowserHTTPClient.SetError:0000) Infinite script recursion (250 calls) detected
Exit: Executing UObject::StaticShutdownAfterError
Critical: FFrame::Serialize
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Resolved)
Critical: AInternetLink::execResolve
Critical: (LinkActor CTF-Amon.LinkActor0 @<hidden> Function UBrowser.UBrowserHTTPClient.Browse : 00C7)
Critical: UObject::ProcessEvent
Critical: (LinkActor CTF-Amon.LinkActor0, Function UBrowser.UBrowserHTTPClient.Timer)
Critical: AActor::Tick
Critical: AInternetLink::Tick
Critical: ATcpLink::Tick
Critical: TickAllActors
Critical: ULevel::Tick
Critical: (NetMode=1)
Critical: TickLevel
Critical: UGameEngine::Tick
Critical: UpdateWorld
Critical: UServerCommandlet::Main
Exit: Exiting.
Uninitialized: Name subsystem shut down
Uninitialized: Log file closed, 07/29/06 22:55:30


Any idea what caused this?

[Matthew]

That's IpToCountry's area of things. However the reason it crashed was because of the function in the engine which resolves hostnames.

[lism]

If it resolves a hostname it proberly reffers a HTTP Site right? Can i put that script on my own webserver for example? I guess those who are having this scripts up their site proberly get reffered all day by various servers now.. Have'nt find the source for IP-toCountry yet....

*requests working php example* :D


Oh yeah and thanks for mentioning my name :thumbup:

[Matthew]

That's all on IpToCountry's end. Head over to that thread :P

[lism]

Yes.

1 more thing, the /editlist page contains a plain text thing. Would it be possible to make the layout same as UT defaults Ban list? like *.*.*.* but then capable of taking up to 255 chars / Hostnames and all?


Edit: The link to main admin in hostnameban needs to be changed into \ServerAdmin\ (Slash)

[[BSC]MasterJohnny]

Matthew, if you ever decide to continue working on the Unreal Administration System or want to develop HostnameBan, or someone else, who has the knowledge of developing it:
Would it be possible to add an exception-list (either for IPs or ASC ids)? I mean, if I ban a whole host, sometimes it would be useful to have an allow-list to let those ips/ids join to the server from that host. What do you think?

[Matthew]

You can already do this :)


From readme:

To ban a policy, use: DENY,host (where host is the player's hostname)
To accept a policy, use: ACCEPT,host

So if you have a range banned DENY,*.alpha.myisp.com then all you do is:
ACCEPT,davemiller.alpha.myisp.com

This would allow 'davemiller', but block everyone else from under alpha.myisp.com

[Baiter]

You can already do this :)


From readme:



So if you have a range banned DENY,*.alpha.myisp.com then all you do is:
ACCEPT,davemiller.alpha.myisp.com

This would allow 'davemiller', but block everyone else from under alpha.myisp.com


It would totally pwn if HostNameBan and ASC ID could be incorporated in the same mod, so you could unban the good legit players that are playing in the same ISP Region as the banned offender. :thumbup:

[Matthew]

A long time ago in a galaxy far far away I added a small thing to ASC which would allow other mods to connect to it and be given a player's ASC ID. Thanks to this, ability in ASC, adding a check to HostnameBan would be a walk in the park. I'll add it to a checklist for features.

[Baiter]

What about us who dont need ASC on our servers though?

You know i'm a strong supporter of ASC, but I dont need it on one of my servers, thus I'm stuck without ASC ID. :cry:

[Matthew]

Very true

[Acidbaby]

Hi, I am looking for a little help on this one. We have this botter that has been pretty much impossible to get rid of so we decided to try this hostnameban package to try something else. This event recently occurred.

WHat I want to find out is why did this match up these 2 different hostmasks? It actually makes sense because the qwest mask is the person who has been verfied as the botter and the williams.edu mask is actually the person we have always suspected but his known Ip is never even close to the verified botters ip.

ScriptLog: Login: (****)
ScriptLog: OPBan: Watcher 7 starting
Log: Possessed PlayerPawn: bbTFemale2 CTF-Face.bbTFemale1
ScriptLog: SuperWebAdmin(DEBUG): Detected new player join..
ScriptLog: OPBan: Watcher 7 starting
ScriptLog: SuperWebAdmin(DEBUG): Player (****) initialized.
ScriptLog: [PureChecker][(****)] CRC: (0:UTPureRC7G:490651206)
ScriptLog: [PureChecker][(****)] CRC: (1:PureCheckerV3:244159890)
ScriptLog: OPBan: Watcher 7 checking IPPolicy for 65.103.**.***:2656
ScriptLog: OPBan: Shutting down watcher 7 after 1 seconds
ScriptLog: [Hostname Ban] New Player: (****) - 65.103.**.*** - 65-103-**-***.mpls.qwest.net
ScriptLog: [Hostname Ban] (****) - Login DENIED - (Policy Match: *.williams.edu)

[Matthew]

"Policy Match:" is going to be incorrect due to a bug in my code. It simply displays the last policy that you have on the list instead of the policy which actually matches.

Just ignore it.

[Acidbaby]

Ok, thanks for the quick reply.

[donjski]

Big problem:

Running 436 and 451b patch on 2 diff servers. IP2country latest version.

I set up the webadmin, and I can login. But it asks me to login a million times.

It's as if the page keeps reloading itself over and over. I am not the only one having this problem. One of my other admins see this problem also.

I use firefox and he uses IE.

I put the HostNameBan folder inside the Web folder on the server. And setup Uweb.webserver as shown in the read me.

Could this have anything to do with the order the packages are listed in the Engine.GameEngine. I did put them in the order requested in the readme.

Any Ideas?

[Engine.GameEngine]
CacheSizeMegs=8
UseSound=True
ServerActors=IpDrv.UdpBeacon
ServerActors=IpServer.UdpServerQuery
ServerActors=IpServer.UdpServerUplink MasterServerAddress=unreal.epicgames.com MasterServerPort=27900
ServerActors=IpServer.UdpServerUplink MasterServerAddress=master0.gamespy.com MasterServerPort=27900
ServerActors=ServerAdds.ServerAdds
ServerActors=UWeb.WebServer
ServerActors=UTDCv20.SMain
ServerActors=UTDCActionMan10.SMain
ServerActors=AutoPause.APActor
ServerActors=MODOSUtilsV25.SplashLogoSA
ServerActors=IGHudv2b.SA
ServerActors=2k4Combos.CombosSA
ServerActors=SmartCTF_4D.SmartCTFServerActor
ServerActors=IpToCountry.LinkActor
ServerActors=HostnameBan.HostnameBan
ServerActors=UTStatsBeta4_2.UTStatsSA

ServerPackages=UTSAccuBeta4_2
ServerPackages=UTPureRC7G
ServerPackages=2k4Combos
ServerPackages=IGHudv2b
ServerPackages=Botpack
ServerPackages=MapVoteLA13
ServerPackages=SmartCTF_4D
ServerPackages=CountryFlags2
ServerPackages=MODOSUtilsV25
ServerPackages=serverlogo
ServerPackages=Revenge
ServerPackages=UTDCShared
ServerPackages=UTDCv20
ServerPackages=UTDCv20dll
ServerPackages=SoldierSkins
ServerPackages=CommandoSkins
ServerPackages=FCommandoSkins
ServerPackages=SGirlSkins
ServerPackages=BossSkins
ServerPackages=Zeroping_v100

[Matthew]

Probably issues with your UWeb realm or something.

[donjski]

My Uweb should be fine, I use SWA.95, and server adds with no problems...

[werewolf]

what are the chances this gonna happen

[SoNY_scarface]

ok i have a few questions about hostname ban

first of all does hostname change with IP changes? if not is the hostname same for all IPs for each client? does anyone else have the same hostname or is it unique to each client?

[Matthew]

Yes a hostname can change. Hostname ban is designed to be used most effeictively by banning host ranges.

[adminthis]

ok i have a few questions about hostname ban

first of all does hostname change with IP changes? if not is the hostname same for all IPs for each client? does anyone else have the same hostname or is it unique to each client?

Hostnames are unique, just like IP addresses. However, some ISPs assign dynamic hostnames, for example: 84-32-198-200.city.cable.net, resolving to 84.32.198.200. Then when their IP changes to -for example- 84.44.1.2, their hostname will be 84-44-1-2.city.cable.net. So use range bans. E.g.: *.city.cable.net.

In most cases, though, hostnames are static. So for example cust101.city.cable.net will always resolve to the same person (cust101), regardless whether the IP address it resolves to is dynamic.

[SoNY_scarface]

if i did a dynamic range ban on *.city.cable.net for example, would there be other people on the same hotstname?

[adminthis]

if i did a dynamic range ban on *.city.cable.net for example, would there be other people on the same hotstname?

There could be other people matching that range ban. But it blocks less addresses than say blocking *.*.cable.net.

I'd say first ban their hostname. If they still come back, ban the range.

[SoNY_scarface]

well im pretty sure id have to do a range ban because the 2 people that i am trying to keep out have their IPs change more often than they change their underwear lol

[SoNY_scarface]

thank you this works a treat! :) finally got rid of the 2 guys that were making playing on my servers a misery... :D thank you!!!!

one request tho....can it be modified to check spec too?

[CPanoplyd]

You could use SpectatorPlus to password protect the Spectator Spot.

[SoNY_scarface]

nah id like to leave spec open to public...it'd be handy if hostnameban checked specs too, otherwise they fuggers can still get in and annoy the hell outta everyone lol

[Matthew]

HostnameBan should be checking specs as well... it is made to check all PlayerPawns.... so unless you are using a weird spectator class...

[SoNY_scarface]

nope im using the standard spectator thingy that came with the server lol and not knowing what im using i guess it is standard UT....its not checking specs tho i can tell u that for a fact now...at least it isnt on my server

another thing id like to request....i have had to ban DENY,*.*.btcentralplus.com

so anyone on btcentralplus.com is banned however one of my clan admins are on this host so is there something i could do without having to change the ini each time he starts his computer? cos his IP, hostname range etc change each time he starts up meaning i couldnt just allow 1 hostname of his id have to edit the ini to allow each day...

[{KAI}Cannon]

Matthew, could you add me to your list?

I sent you a PM a while ago, and I don't know if you have it set to receive only from people you specify.

Thanks!

By the way, when I clicked on your links last night, they were inoperable. ( something like atomicunreal could not be found).

[SoNY_scarface]

ok an idea to allow people effected by range bans as such DENY,*.*.btcentralplus.com

when the client gets rejected can there be an option to supply a password to override hostname ban? obviously maximum of three attempts or somethin after which it locks from the IP it had too many imcorrect attempts

[Matthew]

If someone is effected by the ban you need to create an ALLOW, policy for them. That will over-ride the DENY, policy. Also, don't use more than one *.

For example:
DENY,*.range123.isp.net
ALLOW,*.jason.range123.isp.net

[SoNY_scarface]

so in my case it would be DENY,*.btcentralplus.com ?

[Matthew]

Expect an update much later today. The only addition is the ability to reject all clients that fail to resolve a hostname. Unless anyone has other ideas...

[[BSC]MasterJohnny]

Please also fix the policy match report. :) Thx in advance.

[Matthew]

Yeah that's been fixed too, forgot to mention that...

[JiveMiguel]

Is anybody still watching this thread? Matthew, the link in your sig doesn't work at the moment... The docs for IP to country only talk about UT99... I assume this all works well with ut2k4? I'll try it and see, but reply if you're there! Thanks!

[Matthew]

Nope, all my mods are for UT99 only.

[SoNY_scarface]

Matthew
I have someone in the range of bas*-toronto*-*.dsl.bell.ca and as you've recomended i have banned *.dsl.bell.ca but i have people caught up in this *.dsl.bella.ca range ban so is it possible to ban bas*-toronto*-*.dsl.bell.ca as opposed to *.dsl.bella.ca?

hope that made sense :S

[Matthew]

Yeah uh *.dsl.bell.ca is a massive range and you probably shouldn't ban that... what you are asking should work. Also, I'd like to note / remind readers that if you have banned a segment (*.gurana-ks.comcast.net) you can also make ACCEPT policies for your effected users (ACCEPT,johan.gurana-ks.comcast.net). Once again though I cannot stress that your range ban for *.dsl.bell.ca is truly massive and you are probably blocking a hell of a lot of legit players.

[Matthew]

And a status update... I'm not quite ready to release a version that simply rejects all that fail to resolve a hostname. I'm finding that such an action would seriously impact legit players.

[[ZSZ]Evil_Dragon]

I've banned that range by including the numbers like:

bas9-toronto12-*.dsl.bell.ca
or
bas2-montrealak-*.dsl.bell.ca

Seems like only one street locked out that way and works perfect.

[2399Skillz]

Need some assistance here.

Join succeeded: user_name
[Hostname Ban] IpToCountry returned an error! (Error: !Disabled)
[Hostname Ban] Hostname Ban is aborting banlist check for user_name
[Hostname Ban] New Player: user_name - xxx.xxx.xxx.xxx - !Disabled
[Hostname Ban] user_name - Login Accepted

Why would I be getting this error? Others show it as blocking this particular user, but this one he got in somehow?

Also I haven't changed anything, logs before this show the user being blocked and logs after this show him being blocked. There is a small time frame that shows where he was able to get in, with the above "error" of some sort that allowed him access.

[Matthew]

That should only ever occur if bDisabled is set to true in IP2C. Try a diff version maybe...

[[BSC]MasterJohnny]

Or it might have been a temporary error in the IPToCountry database you use.

[2399Skillz]

I will try a different version and I'm using the default database.

[adminthis]

IPToCountry disables itself ("!Disabled") after multiple lookup failures. This happens if the lookup servers you use are down or "return bad data". To get around this, I now run my own IP2C server locally using the latest Maxmind IP database and also use unrealadmin.org's IP2C server as a backup.

[2399Skillz]

Where can I get the Maxmind IP database? I'll do the same kind of setup, shouldn't be too hard to get it setup, no?

[adminthis]

Where can I get the Maxmind IP database? I'll do the same kind of setup, shouldn't be too hard to get it setup, no?

The easiest route is to download XAMPPlite. This is a free software package which contains a pre-configured Apache (webserver), PHP (scripting) and also MySQL (database, not required). http://www.apachefriends.org/en/xampp-windows.html#646

A monthly update of the GeoIP database is released for free at: http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz

You should place that file (unzipped) together with iptocountry13.php in the \htdocs folder of your webserver (if you are using Apache). You can then do a test lookup to see if it's working, using: http://your.ip.address.here/iptocountry13.php?ip=72.14.221.104

If this is ok, open IpToCountry.ini and set your main query server to the computer you are running your own webserver on and point the 2nd query server to the unrealadmin.org server.

[0wn m3 pl0x]

Thanks, i needed this. Someone is avoided a ban after i range banned him so...this is next.

[[ZSZ]Evil_Dragon]

I have a notorious cheater that got around the hostname ban by using an IP that apparently has no hostname...

Trying to lookup the hostname returns:
"No host name is associated with this IP address or no reverse lookup is configured.
Error:Host not found"

The serverlog shows this:
ScriptLog: [Hostname Ban] New Player: BALTHAZAR - 142.46.8.22 - 142.46.8.22
ScriptLog: [Hostname Ban] BALTHAZAR - Login Accepted

For all other players the Hostname was resolved in that map so a failure there can't be the problem.

:eek:

Any ideas??

[Matthew]

I've been attempting to work out a way to solve this issue for a long time. The easy solution would be to ban everyone that doesn't return a hostname. However that isn't an acceptable solution, as many many legit players don't have hostnames (on my server alone I see 4-5 per day).

[[ZSZ]Evil_Dragon]

How can it be at all that someone has no hostname?

[adminthis]

Evil_Dragon;142004']How can it be at all that someone has no hostname?

That's the way the Internet works. Not all IP addresses have a reverse DNS entry.. why should they? The idea behind a hostname is so it's easier to identify/reach a particular host. This is great for servers (running a website or another service) but not really that necessary for home users.

[YuGo]

I guess it's not possible to ban a player with a hostname like 50-0-100-500.adsl.cable.uk without banning other players with xx-x-xxx-xxx.adsl.cable.uk?

[Matthew]

Not really... unless you see a particular trend to the hostnames and IP addresses they use.

[YuGo]

Okey, thanks, thought so. Unfortunately there is no trend visible, at least not for that specific user.

[SoNY_scarface]

YuGo where u been lol ...

[YuGo]

Long time no see, I gotta drop by once ;)

[SoNY_scarface]

well where u been nub....u still a uk player?

[UnrealD]

Hey dude im trying to use your Hostname Mod. I am trying to ban an idiot and this is his hostname.


ScriptLog: [Hostname Ban] New Player: **** - 67.71.79.59 - bas9-montrealak-1128746811.dsl.bell.ca

ScriptLog: [Hostname Ban] Kn4D - Login Accepted

For some reason its allowing him in, when i pull up the logs.

These are the settings in Hostname.ini
BannedMessage=You are banned from this server!
HostnamePolicies[0]=ACCEPT,*
HostnamePolicies[1]=Deny,bas9-montrealak-1177579106.dsl.bell.ca
HostnamePolicies[2]=DENY,*bas9-montrealak-1177579106.dsl.bell.ca

and like this in the UT.INI

[HostnameBan.HBConfigUT]
SemiPassword=
bAnnounceKicks=False
BannedMessage=Your Hostname is banned. Questions?
HostnamePolicies[0]=ACCEPT,*
HostnamePolicies[1]=ACCEPT,
HostnamePolicies[2]=DENY,bas9-montrealak-1177579106.dsl.bell.ca
HostnamePolicies[3]=DENY,DENY,*BAS9-MONTREALAK-1177579106.DSL.BELL.CA
HostnamePolicies[4]=DENY,*BAS9-MONTREALAK-1177579106.DSL.BELL.CA


Im trying to make sure his banned. Is this the right way?

[Matthew]

You've got some weird stuff in your config. Firstly, delete everything you have in your UT.ini config, you only need it one place.

Your configuration file should be called HostnameBan.ini

... and to ban this user, just copy-paste the following into that file. It should be:

[HostnameBan.HBConfigExt]
SemiPassword=
bAnnounceKicks=False
BannedMessage=You are banned from this server!
HostnamePolicies[0]=ACCEPT,*
HostnamePolicies[1]=DENY,bas9-montrealak-1128746811.dsl.bell.ca
HostnamePolicies[2]=
HostnamePolicies[3]=
HostnamePolicies[4]=
HostnamePolicies[5]=
HostnamePolicies[6]=
HostnamePolicies[7]=
HostnamePolicies[8]=
HostnamePolicies[9]=
HostnamePolicies[10]=
HostnamePolicies[11]=
HostnamePolicies[12]=
HostnamePolicies[13]=
HostnamePolicies[14]=
HostnamePolicies[15]=
HostnamePolicies[16]=
HostnamePolicies[17]=
HostnamePolicies[18]=
HostnamePolicies[19]=
HostnamePolicies[20]=
HostnamePolicies[21]=
HostnamePolicies[22]=
HostnamePolicies[23]=
HostnamePolicies[24]=
HostnamePolicies[25]=
HostnamePolicies[26]=
HostnamePolicies[27]=
HostnamePolicies[28]=
HostnamePolicies[29]=
HostnamePolicies[30]=
HostnamePolicies[31]=
HostnamePolicies[32]=
HostnamePolicies[33]=
HostnamePolicies[34]=
HostnamePolicies[35]=
HostnamePolicies[36]=
HostnamePolicies[37]=
HostnamePolicies[38]=
HostnamePolicies[39]=
HostnamePolicies[40]=
HostnamePolicies[41]=
HostnamePolicies[42]=
HostnamePolicies[43]=
HostnamePolicies[44]=
HostnamePolicies[45]=
HostnamePolicies[46]=
HostnamePolicies[47]=
HostnamePolicies[48]=
HostnamePolicies[49]=
HostnamePolicies[50]=
HostnamePolicies[51]=
HostnamePolicies[52]=
HostnamePolicies[53]=
HostnamePolicies[54]=
HostnamePolicies[55]=
HostnamePolicies[56]=
HostnamePolicies[57]=
HostnamePolicies[58]=
HostnamePolicies[59]=
HostnamePolicies[60]=
HostnamePolicies[61]=
HostnamePolicies[62]=
HostnamePolicies[63]=
HostnamePolicies[64]=
HostnamePolicies[65]=
HostnamePolicies[66]=
HostnamePolicies[67]=
HostnamePolicies[68]=
HostnamePolicies[69]=
HostnamePolicies[70]=
HostnamePolicies[71]=
HostnamePolicies[72]=
HostnamePolicies[73]=
HostnamePolicies[74]=
HostnamePolicies[75]=
HostnamePolicies[76]=
HostnamePolicies[77]=
HostnamePolicies[78]=
HostnamePolicies[79]=
HostnamePolicies[80]=
HostnamePolicies[81]=
HostnamePolicies[82]=
HostnamePolicies[83]=
HostnamePolicies[84]=
HostnamePolicies[85]=
HostnamePolicies[86]=
HostnamePolicies[87]=
HostnamePolicies[88]=
HostnamePolicies[89]=
HostnamePolicies[90]=
HostnamePolicies[91]=
HostnamePolicies[92]=
HostnamePolicies[93]=
HostnamePolicies[94]=
HostnamePolicies[95]=
HostnamePolicies[96]=
HostnamePolicies[97]=
HostnamePolicies[98]=
HostnamePolicies[99]=
HostnamePolicies[100]=
HostnamePolicies[101]=
HostnamePolicies[102]=
HostnamePolicies[103]=
HostnamePolicies[104]=
HostnamePolicies[105]=
HostnamePolicies[106]=
HostnamePolicies[107]=
HostnamePolicies[108]=
HostnamePolicies[109]=
HostnamePolicies[110]=
HostnamePolicies[111]=
HostnamePolicies[112]=
HostnamePolicies[113]=
HostnamePolicies[114]=
HostnamePolicies[115]=
HostnamePolicies[116]=
HostnamePolicies[117]=
HostnamePolicies[118]=
HostnamePolicies[119]=
HostnamePolicies[120]=
HostnamePolicies[121]=
HostnamePolicies[122]=
HostnamePolicies[123]=
HostnamePolicies[124]=
HostnamePolicies[125]=
HostnamePolicies[126]=
HostnamePolicies[127]=
HostnamePolicies[128]=
HostnamePolicies[129]=
HostnamePolicies[130]=
HostnamePolicies[131]=
HostnamePolicies[132]=
HostnamePolicies[133]=
HostnamePolicies[134]=
HostnamePolicies[135]=
HostnamePolicies[136]=
HostnamePolicies[137]=
HostnamePolicies[138]=
HostnamePolicies[139]=
HostnamePolicies[140]=
HostnamePolicies[141]=
HostnamePolicies[142]=
HostnamePolicies[143]=
HostnamePolicies[144]=
HostnamePolicies[145]=
HostnamePolicies[146]=
HostnamePolicies[147]=
HostnamePolicies[148]=
HostnamePolicies[149]=
HostnamePolicies[150]=
HostnamePolicies[151]=
HostnamePolicies[152]=
HostnamePolicies[153]=
HostnamePolicies[154]=
HostnamePolicies[155]=
HostnamePolicies[156]=
HostnamePolicies[157]=
HostnamePolicies[158]=
HostnamePolicies[159]=
HostnamePolicies[160]=
HostnamePolicies[161]=
HostnamePolicies[162]=
HostnamePolicies[163]=
HostnamePolicies[164]=
HostnamePolicies[165]=
HostnamePolicies[166]=
HostnamePolicies[167]=
HostnamePolicies[168]=
HostnamePolicies[169]=
HostnamePolicies[170]=
HostnamePolicies[171]=
HostnamePolicies[172]=
HostnamePolicies[173]=
HostnamePolicies[174]=
HostnamePolicies[175]=
HostnamePolicies[176]=
HostnamePolicies[177]=
HostnamePolicies[178]=
HostnamePolicies[179]=
HostnamePolicies[180]=
HostnamePolicies[181]=
HostnamePolicies[182]=
HostnamePolicies[183]=
HostnamePolicies[184]=
HostnamePolicies[185]=
HostnamePolicies[186]=
HostnamePolicies[187]=
HostnamePolicies[188]=
HostnamePolicies[189]=
HostnamePolicies[190]=
HostnamePolicies[191]=
HostnamePolicies[192]=
HostnamePolicies[193]=
HostnamePolicies[194]=
HostnamePolicies[195]=
HostnamePolicies[196]=
HostnamePolicies[197]=
HostnamePolicies[198]=
HostnamePolicies[199]=
HostnamePolicies[200]=
HostnamePolicies[201]=
HostnamePolicies[202]=
HostnamePolicies[203]=
HostnamePolicies[204]=
HostnamePolicies[205]=
HostnamePolicies[206]=
HostnamePolicies[207]=
HostnamePolicies[208]=
HostnamePolicies[209]=
HostnamePolicies[210]=
HostnamePolicies[211]=
HostnamePolicies[212]=
HostnamePolicies[213]=
HostnamePolicies[214]=
HostnamePolicies[215]=
HostnamePolicies[216]=
HostnamePolicies[217]=
HostnamePolicies[218]=
HostnamePolicies[219]=
HostnamePolicies[220]=
HostnamePolicies[221]=
HostnamePolicies[222]=
HostnamePolicies[223]=
HostnamePolicies[224]=
HostnamePolicies[225]=
HostnamePolicies[226]=
HostnamePolicies[227]=
HostnamePolicies[228]=
HostnamePolicies[229]=
HostnamePolicies[230]=
HostnamePolicies[231]=
HostnamePolicies[232]=
HostnamePolicies[233]=
HostnamePolicies[234]=
HostnamePolicies[235]=
HostnamePolicies[236]=
HostnamePolicies[237]=
HostnamePolicies[238]=
HostnamePolicies[239]=
HostnamePolicies[240]=
HostnamePolicies[241]=
HostnamePolicies[242]=
HostnamePolicies[243]=
HostnamePolicies[244]=
HostnamePolicies[245]=
HostnamePolicies[246]=
HostnamePolicies[247]=
HostnamePolicies[248]=
HostnamePolicies[249]=
HostnamePolicies[250]=
HostnamePolicies[251]=
HostnamePolicies[252]=
HostnamePolicies[253]=
HostnamePolicies[254]=
HostnamePolicies[255]=

[[ZSZ]Evil_Dragon]

Don't know if we want to ban the same guy, but I banned him with this:

HostnamePolicies[6]=DENY,bas2-montrealak-*.dsl.bell.ca

because the numbers will change with his IP.

[SoNY_scarface]

Hostname ban is effective, but is there a way of possible mac hash bans? I know logging of mac numbers is illegal in USA, but assigning MD5 hashes too mac numbers and then in turn using the MD5's to ban would be effective i think. Sure you can just go and buy another Network card but it wont be too long until he gets figured out and then bam he has the need to buy another lol

Is this not possible?

[Matthew]

To be honest, I don't know... though I'm almost positive there's no way to get that info from UScript

[UnrealD]

hE CAME again the idiot.

I banned his but he changed the last numbers.

This was the first thing i banned,

DENY,bas9-montrealak-1128746811.dsl.bell.ca

Then he logged in with this
bas9-montrealak-1128746633.dsl.bell.ca

So what do i put to ban his whole range!!

His a pest!

[Matthew]

hE CAME again the idiot.

I banned his but he changed the last numbers.

This was the first thing i banned,

DENY,bas9-montrealak-1128746811.dsl.bell.ca

Then he logged in with this
bas9-montrealak-1128746633.dsl.bell.ca

So what do i put to ban his whole range!!

His a pest!

HostnamePolicies[0]=ACCEPT,*
HostnamePolicies[1]=DENY,bas9-montrealak-1128746*.dsl.bell.ca

Should do the trick

[face]

I got him banned same way as mathew said i hope he stays out now.He likes the do cheatrecs in bunnytrack on my server.On my server he usses the name D4NK reverse it you get KN4D :) funny little fucker.

[SoNY_scarface]

If UTDC generates an MD5 hash when a cheat or possible cheat is logged. Can a ban system not be developed for this purpose but instead of producing #'s for logged and possible cheats have it log everyone?

[Matthew]

I'm not sure if I understood what you mean.

[Azura]

If UTDC generates an MD5 hash when a cheat or possible cheat is logged. Can a ban system not be developed for this purpose but instead of producing #'s for logged and possible cheats have it log everyone?

What do you mean by that ? Log the md5s of the files or everyone visiting on the server ? Or by #/number do you mean some sort of unique id ?

[2399Skillz]

I think what he means is;

Since UTDC can generate MD5 checkups of players who are logged as cheaters on a server (false positive or confirmed) why can't something be done to make an MD5 for all users who join a server and ban that instead.

[UnrealD]

This guys is a pest.

I tried banning what you said Matthew. But look what he comes in under.

69.156.205.73 - bas9-montrealak-1167904073.dsl.bell.ca

As you can see he changed all of the first numers. Is there a way to ban bas9- montrealak.dsl.bell.ca in general? Its the only thing he cant change.

[UnrealD]

I actually already have this in Hostnameban.INI and his still getting in.

[HostnameBan.HBConfigExt]
SemiPassword=
bAnnounceKicks=True
BannedMessage=You are banned from this server!
HostnamePolicies[0]=ACCEPT,*
HostnamePolicies[1]=DENY,bas9-montrealak-1128746811.dsl.bell.ca
HostnamePolicies[2]=DENY,bas2-montrealak-*.dsl.bell.ca
HostnamePolicies[3]=DENY,bas9-montrealak-*.dsl.bell.ca

[2399Skillz]

The problem with this is you'll start banning a bunch of people, if no one from that area has been playing on your server, then just ban even more.

*.dsl.bell.ca

Should take care of any possible IP/Hostname he can get from his ISP.

[Matthew]

*.dsl.bell.ca


If you do that, you're gonna ban tens of thousands of legit players (anyone who is a user of Bell's DSL service).

If banning him by doing DENY,bas9-montrealak-*.dsl.bell.ca isn't working, then something is wrong in your configuration or something.

[UnrealD]

I dont understand what could be wrong. SHould i post the UT.INI Hostname settings?

[2399Skillz]

I dont understand what could be wrong. SHould i post the UT.INI Hostname settings?

Yes. Also post your log, I've found that sometimes it doesn't resolve the host names correctly, thus allowing all host name bans to get through. This has only happened occasionally though.

[Matthew]

Yes. Also post your log, I've found that sometimes it doesn't resolve the host names correctly, thus allowing all host name bans to get through. This has only happened occasionally though.

Indeed... some ISPs don't assign hostnames to their clients (many, in fact). I'd actually be interested in seeing your *entire* UT.ini, but make sure you remove all passwords and other sensitive info!

[UnrealD]

Is there anyway i can send you a email? Or maybe talk to you through a messenger?

[Matthew]

You could PM me, but that's all I'll do.

[[ZSZ]Evil_Dragon]

Could it fail because the first entry in his ini is:

HostnamePolicies[0]=ACCEPT,*

so like a wildcard to accept all hostnames?

(Just an idea since I don't have that entry and my bans with a syntax like
HostnamePolicies[7]=DENY,bas2-montrealak-*.dsl.bell.ca
are working perfect, also from the logs he posts the IP seems to resolve to a hostname, so that can't be the problem either)

[Matthew]

Well HostnameBan's policy listings is setup to mimic the Engine's IP banning policy, where the first policy is what to do by default, and then all policies afterwards override the first. That, though, doesn't mean it's working... so maybe give it a try.

[Matthew]

@<hidden>: after looking over your configuration, I have a strong strong feeling that you've just incorrectly installed the mod, hence your troubles. In your server's INI, do you have the following section:

[HostnameBan.HostnameBan]
bUseSystemIni=True

If you do, this is why your installation is not working. You need to remove this entire section.

[UnrealD]

Yes i do have this in the UT.INI

[HostnameBan.HostnameBan]
bUseSystemIni=True

So i should delete this from the UT.INI?

[2399Skillz]

Yes you do. Remove it completely and restart your server.

[Matthew]

Readme.txt... always useful.

[fidelito]

hello all!

please i need help for ban a player

[Hostname Ban] New Player: name - 201.93.243.10 - 201-93-243-10.dsl.telesp.net.br

i need ban this player because he have cheated but i have 2 problems:

1st pb is: i have other members in my clan using this host too

.dsl.telesp.net.br and their ip start to 201 too

2nd pb is: this cheater change his ip all the time.

how can i ban him please ?

ty in advance for your help.

[admin]

are you ok for anticheat ? if he whas kik all the time it's not a probleme

[fidelito]

are you ok for anticheat ? if he whas kik all the time it's not a probleme

yes im ok with anti cheat!

the problem is he dont come always with his radar.

i ask how ban him definitely?

[back4more]

with the advent of the HWID generated by [ACE] Perhaps this could be implemented into a New version of hostnameban. also with respect to banned players .... I noticed when they are banned they manage to actually get through so that their names show up in the HUD before being Kicked. however I have also noticed that in the server console the name/credentials of the player are listed prior to them actually logging into the server. would it not be better to identify them before they actually login and remove them (Ban) - eliminating the HUD Display , Player johnDoe connected; Player JohnDoe Kicked for 10 years, Player WTF connected; Player WTF kicked for 10 years;Player why_u_Ban_Me Connected;Player why_u_ban_me kicked for 10 years. :P

just curious.... assuming it is because the server needs to properly identify the banned player correctly , which requires the total connection to the server in order to proceed.

Cheers

BTw Keep u the good Work Mathew. Very much appreciated.

[Matthew]

just curious.... assuming it is because the server needs to properly identify the banned player correctly , which requires the total connection to the server in order to proceed.Yep, you've answered your own question.

As for ACE, as opposed to making an add-on to hostname ban, it really should just be made into its own mod.

[The Dentist]

I have banned someone with hostnameban but he can still spam messages in the nexgen chat before he gets disconnected.:(
Is there a way to block any messages sent?

[back4more]

I have banned someone with hostnameban but he can still spam messages in the nexgen chat before he gets disconnected.:(
Is there a way to block any messages sent?

and

eliminating the HUD Display , Player johnDoe connected; Player JohnDoe Kicked for 10 years, Player WTF connected; Player WTF kicked for 10 years;Player why_u_Ban_Me Connected;Player why_u_ban_me kicked for 10 years.

^_^

and apparently not .. :\

actually there is a way but you need r00t access combined with IPtables , works like a charm.. maybe try adding to the server.ini in the policies section the IP DENY,Go away etc...

it may/not work not sure as i have not tested it myself.

[luluthefirst]

//
// Accept or reject a player on the server.
// Fails login if you set the Error to a non-empty string.
//
event PreLogin
(
string Options,
string Address,
out string Error,
out string FailCode
)


It calls this function before the player get the map

it mays help

[back4more]

noice ^_^ see that , its called a glimmer of hope :)

I think we're onto something .. Meandertheal where are you bro?

hehe